Security Access Manager 9.0 Firmware Security Vulnerabilities and Issues — Security Access Manager 9.0 Firmware CVE List

Lucene search

IbmSecurity Access Manager 9.0 Firmware

5 matches found

CVE•added 2017/02/01 8:59 p.m.•43 views

CVE-2016-3022

IBM Security Access Manager for Web could allow an authenticated user to gain access to highly sensitive information due to incorrect file permissions.

6.5CVSS6.3AI score0.0019EPSS

CVE•added 2018/01/10 5:29 p.m.•42 views

CVE-2017-1533

IBM Security Access Manager Appliance 9.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 130675...

6.1CVSS5.7AI score0.00309EPSS

CVE•added 2017/06/07 5:29 p.m.•35 views

CVE-2016-3019

IBM Security Access Manager for Web 9.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 114462.

6.5CVSS6.2AI score0.0013EPSS

CVE•added 2017/02/01 8:59 p.m.•31 views

CVE-2016-3027

IBM Security Access Manager for Web is vulnerable to a denial of service, caused by an XML External Entity Injection (XXE) error when processing XML data. A remote attacker could exploit this vulnerability to expose highly sensitive information or consume all available memory resources.

6.5CVSS6.7AI score0.0056EPSS

CVE•added 2016/02/15 2:59 a.m.•29 views

CVE-2015-8531

Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Web 8.0 before 8.0.1.3 IF4 and 9.0 before 9.0.0.1 IF1 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

6.1CVSS5.9AI score0.00225EPSS